Back to the CVE list
CVE-2025-5777 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

CVSS score

9.3

EPSS probability

%100.0

Risk score

18.6

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CitrixBleed Exploit Tool - CVE-2025-5777 & CVE-2026-8452. Unauthenticated remote memory read from Citrix NetScaler ADC & Gateway. Steal admin session tokens, extract nsroot hashes, dump secrets, and bypass MFA. Python 3 exploit with full memory parsing.

Public PoCSource updated: 30.08.2026 13:23:18

CVE Reproduction: cve-2025-5777-citrixbleed2_reproduction

Public PoCSource updated: 23.07.2026 03:46:10

CVE-2025-5777 Research writeup

Public PoCSource updated: 13.07.2026 11:49:24

Exploit for CVE-2025-5777: Citrix NetScaler Memory Disclosure (CitrixBleed 2)

Public PoCSource updated: 21.04.2026 21:52:46

CVE-2025-5777

Public PoCSource updated: 02.03.2026 11:37:33

CitrixBleed2 powershell version

Public PoCSource updated: 13.02.2026 09:23:59

rashedhasan090/CVE-2025-5777

Public PoCSource updated: 23.11.2025 21:34:50

placeholder for CitrixBleed 2.0 CVE-2025-5777

Public PoCSource updated: 16.11.2025 09:15:25

Sheep-Hunter/CVE-2025-5777-POC

Public PoCSource updated: 29.07.2026 09:47:59

nicecopy/POC-CVE-2025-5777

Public PoCSource updated: 18.08.2025 23:46:26

Citrix NetScaler ADC/Gateway 14.1 - Memory Disclosure

Exploit referenceSource updated: 11.08.2025 00:00:00

Nuclei: Citrix NetScaler Memory Disclosure - CitrixBleed 2

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-5777"